Last updated: 31 October 2025

1) Who we are (Data Controller)

The data controller for activities carried out through this website is Ramproart S.L., Calle Princesa 31, 28008 Madrid, Spain (“we”, “us”, the “Controller”). For general enquiries please use info@van-gogh.es; press enquiries: prensa@van-gogh.es. eventim-light.com+1

2) What data we collect

• Contact & support: name, email, phone, message content, and any information you choose to share when you contact us (e.g., by email or via any form we may provide). Van Gogh

• Ticketing (when applicable): identifiers and purchase details processed by our authorised ticketing providers.

• Technical data: IP address, device/browser information, pages visited, timestamps, and cookies or similar technologies used for basic site functionality and analytics.

3) Why we process your data (purposes & legal bases)

• Answering enquiries and providing support (Art. 6(1)(f) GDPR – legitimate interest in operating our services; or Art. 6(1)(b) when responding to pre-contract queries you initiate).

• Ticketing & event administration (Art. 6(1)(b) – contract; and Art. 6(1)(f) – preventing abuse, fraud, or misuse).

• Legal and compliance (Art. 6(1)(c) – legal obligations).

• Analytics and site performance (Art. 6(1)(f) – legitimate interest in operating an effective, secure website; where required, we rely on your consent under Art. 6(1)(a)).

4) Where your data comes from

• Directly from you when you contact us or purchase tickets.

• From ticketing partners that process your order on our behalf and share necessary information with us to manage access, customer service, or incident resolution. (Our current event pages identify Ramproart S.L. as the responsible entity for the exhibition.) eventim-light.com

5) Who we share data with

• Ticketing/Payments partners (e.g., Eventim Light or equivalent) for order processing, access control, and customer service. eventim-light.com

• IT/hosting, analytics, and security providers that help us run the website.

• Public authorities where required by law or to defend legal claims.

We require all processors to provide appropriate technical and organisational measures and only process data under our instructions.

6) International transfers

Some providers may operate outside the EEA. Where this occurs, we rely on an adequacy decision, or we implement Standard Contractual Clauses and additional safeguards as required by GDPR.

7) How long we keep your data

• Enquiries/support: typically up to 12 months after resolution, unless needed for legal defence or longer ongoing correspondence.

• Ticketing/transactions: retained as required by accounting, tax, and consumer regulations (commonly 5–10 years, depending on the jurisdiction).

• Technical/log data: typically up to 12 months for security and diagnostics, unless aggregated or anonymised sooner.

8) Your rights

Under GDPR you may request: access, rectification, erasure, restriction, portability, and objection to processing (including objection to processing based on legitimate interests). Where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing. You also have the right to lodge a complaint with your local data protection authority.

To exercise your rights, contact us at info@van-gogh.es. Van Gogh

9) Cookies & similar technologies

Our site may use cookies for essential functionality (e.g., session management), preferences, and analytics. Where required, we will present a consent banner allowing you to accept or manage non-essential cookies. You can also control cookies via your browser settings.

10) Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, but we continuously improve our safeguards.

11) Third-party links

Our website may contain links to third-party sites (e.g., ticketing portals). Their privacy practices are governed by their own policies. Please review them before submitting personal data.

12) Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the effective date at the top.